Good morning. I removed it and reinstalled it, deleting everthing. I did hang on to the graylog log but not the es one. I reinstalled...using the source instead of apt repos, and it's all working again. I increased the es heap to half the ram, bumped up the gl heap to 2g and re-did the extractors because I remembar a log mentioning one of the custom fields maybe overruning? In any event it's working now but if you have any input on what might have caused it to begin with I'd be appreciative.
Kindest regards, On Mon, Mar 14, 2016 at 4:52 AM, Jochen Schalanda <[email protected]> wrote: > Hi Tim, > > are there any error messages in the logs of your Graylog server logs or in > the logs of your Elasticsearch nodes? > > > Cheers, > Jochen > > On Friday, 11 March 2016 23:21:10 UTC+1, Tim May wrote: >> >> Hello, >> >> We're just starting to use Graylog and it's quite impressive. We >> recently started sending a high volume of firewall logs and I made some >> regex extractors. Everything was going fine until this afternoon when it >> just stopped processing the firewall logs. All other devices seem to be >> logging fine. I did increase the ES_HEAP_SIZE to have my ram but I'm still >> not processing the firewall logs any more. Any assistance would be >> appreciated. >> >> Best regards. >> > -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/graylog2/1-1Y1DeH1cA/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/bfb769a9-7ba1-45f8-994e-152baa3069f3%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/bfb769a9-7ba1-45f8-994e-152baa3069f3%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Tim May Laurens County School District 55 e. [email protected] o. 864.681.3627 c. 864.939.8292 -- *Confidentiality Notice* | This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, immediately contact the sender by reply e-mail and destroy all copies of the original message. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CANBAQXpEnTuzKGvUyRSjHZ37UTZetvPo076v7UZaULzrmA2VBA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
